Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa
File:                     2bf642a2-d07c-3c1f-84d7-221096477507.roa (raw, json)
Hash identifier:          6OfyzEE/JQoYIyeqZI7GEFXf1iaBkJ4rILCc/yZzdiA=
Subject key identifier:   6F:89:E2:DA:65:F2:10:7B:8F:58:30:75:04:07:14:CD:86:98:65:5F
Certificate issuer:       /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
Certificate serial:       010D0C9F432858452AB7E1CB58DA301FC91CEB00
Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     397122
IP address blocks:        2606:9080::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:e1:cb:58:da:30:1f:c9:1c:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=eaaf931d-116a-47a7-b304-b0621bcdf9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:1c:61:ba:3e:e1:7a:36:9d:54:b4:ef:99:
                    1b:2e:d0:d1:7a:b1:58:9d:b0:9f:44:83:b3:c1:62:
                    b7:a9:69:21:6f:bc:53:72:93:ac:df:28:5a:5c:45:
                    cb:dd:28:40:cc:96:09:d5:b1:c5:83:aa:05:05:f4:
                    df:9b:67:5d:08:fb:7c:c6:fe:f5:fb:b4:5c:7a:26:
                    34:92:c6:97:2b:d3:b3:a8:aa:aa:c2:58:cd:c7:6a:
                    24:7f:3e:c5:56:3d:4e:de:30:d0:25:97:97:c0:89:
                    e8:23:48:e8:8a:6d:6b:0c:41:1d:d2:14:d8:15:67:
                    fe:d0:37:2f:97:a6:70:87:b6:96:9c:d2:56:02:ba:
                    38:a4:fa:03:9f:42:b4:9f:c2:76:0a:8f:1d:92:76:
                    6f:26:64:05:e9:22:2a:37:5c:a3:d9:47:d6:56:cc:
                    09:70:be:61:54:9f:9d:39:ee:2b:b8:a7:3e:c9:0c:
                    77:56:1f:0a:c0:6c:da:f7:a1:6a:43:e6:df:91:16:
                    8a:eb:19:63:f4:2c:85:83:ed:8e:6c:55:7f:12:50:
                    77:7b:dc:ff:28:b5:c4:47:d6:93:19:7d:35:41:8e:
                    3f:17:45:17:bc:94:80:f5:8b:2f:49:82:4c:d4:e3:
                    97:bd:bf:9a:21:2d:8d:28:43:08:ea:ae:1d:ab:02:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:89:E2:DA:65:F2:10:7B:8F:58:30:75:04:07:14:CD:86:98:65:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl

            X509v3 Authority Key Identifier:
                keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:49:75:81:13:db:b4:c0:12:98:6d:4c:8a:ee:c0:bc:65:69:
         3b:0e:f7:1b:71:a4:82:84:1f:53:a1:ae:6c:22:f8:27:0d:56:
         c2:de:77:d1:6e:10:9b:b9:9f:92:6d:38:c2:c1:6c:22:4c:50:
         42:55:15:11:7e:b8:a2:98:a8:fa:f3:e7:a3:56:f2:b0:91:7a:
         b3:b6:72:26:ee:02:86:c9:2d:e8:c8:ef:3e:cc:f1:77:2f:9a:
         15:57:b8:fe:7c:4c:30:a7:8d:8d:05:e9:ee:f1:cc:3e:6f:2d:
         db:7b:d5:eb:a5:b5:f5:68:5a:38:27:d4:11:ea:ef:b1:2a:a1:
         fd:39:eb:63:72:36:08:22:f2:93:73:2c:b3:24:17:95:aa:86:
         10:12:ee:7a:58:9a:4f:61:45:2c:b3:8e:0a:6b:da:05:dc:53:
         dd:92:e9:76:90:6c:e6:31:59:1a:28:b9:88:4b:9d:98:5d:d5:
         b9:14:70:84:5f:ea:ec:6b:c0:8b:cd:23:c5:16:10:c3:bd:23:
         20:1b:3d:4a:29:97:c3:55:da:5c:2f:19:2a:5d:ee:e8:e2:68:
         72:ec:31:63:c8:ee:c5:c9:f3:c2:db:47:f6:a7:5e:d1:ac:f5:
         38:59:98:8f:b4:28:0b:c8:4a:28:31:72:01:dc:65:bc:81:41:
         b7:f5:4c:c6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUqt+HLWNowH8kc6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY0MTRiOTktYmI5Zi00OTJhLWExYWMtOTM1YTQ5OTM1
ZDlkMB4XDTI0MDMxMTAxMDAyNloXDTI0MDYwOTAxMDAyNlowLzEtMCsGA1UEAxMk
ZWFhZjkzMWQtMTE2YS00N2E3LWIzMDQtYjA2MjFiY2RmOWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUMcYbo+4Xo2nVS075kbLtDRerFYnbCfRIOz
wWK3qWkhb7xTcpOs3yhaXEXL3ShAzJYJ1bHFg6oFBfTfm2ddCPt8xv71+7RceiY0
ksaXK9OzqKqqwljNx2okfz7FVj1O3jDQJZeXwInoI0joim1rDEEd0hTYFWf+0Dcv
l6Zwh7aWnNJWAro4pPoDn0K0n8J2Co8dknZvJmQF6SIqN1yj2UfWVswJcL5hVJ+d
Oe4ruKc+yQx3Vh8KwGza96FqQ+bfkRaK6xlj9CyFg+2ObFV/ElB3e9z/KLXER9aT
GX01QY4/F0UXvJSA9YsvSYJM1OOXvb+aIS2NKEMI6q4dqwLMuQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG+J4tpl8hB7j1gwdQQHFM2GmGVfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNjQx
NGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVhNDk5MzVkOWQvMmJmNjQyYTItZDA3Yy0z
YzFmLTg0ZDctMjIxMDk2NDc3NTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjY0MTRiOTktYmI5Zi00OTJhLWEx
YWMtOTM1YTQ5OTM1ZDlkL2Y2NDE0Yjk5LWJiOWYtNDkyYS1hMWFjLTkzNWE0OTkz
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAUXyjgr3R9K6UUhQRsKCjt7dfyvZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mNjQxNGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVh
NDk5MzVkOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaQgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBLSXWBE9u0wBKYbUyK7sC8ZWk7DvcbcaSChB9Toa5sIvgnDVbC3nfR
bhCbuZ+SbTjCwWwiTFBCVRURfriimKj68+ejVvKwkXqztnIm7gKGyS3oyO8+zPF3
L5oVV7j+fEwwp42NBenu8cw+by3be9XrpbX1aFo4J9QR6u+xKqH9OetjcjYIIvKT
cyyzJBeVqoYQEu56WJpPYUUss44Ka9oF3FPdkul2kGzmMVkaKLmIS52YXdW5FHCE
X+rsa8CLzSPFFhDDvSMgGz1KKZfDVdpcLxkqXe7o4mhy7DFjyO7FyfPC20f2p17R
rPU4WZiPtCgLyEooMXIB3GW8gUG39UzG
-----END CERTIFICATE-----
Generated at Thu May 16 02:04:44 2024 by rpki-client on console-ams.rpki-client.org